Protecting user accounts with a PIN code

[fabian-marquardt]

Barcodes can easily be duplicated. A third party could exploit this to buy products on the account of another user. To protect his or her account, a user should be able to set some sort of PIN code which needs to be entered when buying things (at least in a self-service model).

[thegcat]

Putting this in the backlog as it is not needed for "KA parity".