Application is validated and stores the _id in the pin.

Note: your pin drop will fail if the application does not exist in the
'apps' collection.  There is a line of code you can uncomment to insert
it if you need it.