pin form checks for valid pin