added pins user associations & authorisation