generating pin2 for valid users