don't accept pins longer than 9 digits