fixed wrong credential for correct user in pins controller