refined PIN validation logic and updated validation message