pin / user validation updates