username or pin should not be empty