added pin authorization