added pin/user association and authentication