users must be signed in to create pins