returned anonymous instead of current user in DBQuery's getPins