Change pin verification failures from 401 to 422