Always set pin_confirmed in change_pin