finished validating password if last four of primary phone are not used as a PIN