Added pins/users association and tweaked authorization