Fixed Pin

README.md

@@ -503,6 +503,16 @@ digits is only 10,000 combinations, so hashing would add nothing against anyone
 of the database — the real protection is the lockout: five wrong PINs on a number locks it for
 15 minutes.
 
+Two ways to change someone's PIN, and they now behave the same:
+
+- **New PIN** on the recurring visitors list issues a random one.
+- **Edit** shows the current PIN and has a box to type a replacement. Leave it blank to keep the
+  current one. A typed PIN must be 4 digits and not already in use; either problem is reported
+  rather than ignored.
+
+Saving a record also clears any PIN lockout on that visitor, under both the old and the new
+mobile number.
+
 Four digits gives 10,000 combinations and each must be unique, so that is the ceiling on
 simultaneous recurring visitors. Deactivating someone frees theirs.