Server :: Create An IVR Including A PIN Verification System?

I have Asterisk 1.2 running on a SPARC Solaris machine with a number of extensions, queues and so on configured and working well. Recently I wanted to create an IVR including a PIN verification system, enabling a user to call the number, hear a message (welcome, enter your PIN, etc), enter his PIN in the DISA application and hear another message afterwards without any further input. I can call the extension (IVR), hear the message and input my PIN, though after that I'm left with a dialtone and Asterisk waiting for me to enter a number(extension to call). If I do this, it forwards me correctly, though I'd prefer an intermediate step including a message for the user.

User calls number.
User is greeted with 'Enter your PIN,etc'.
User enters PIN code, followed by a '#'.
User hears another message 'Thank you. Now you can...etc'.
User then provides further input, etc.

Here's an excerpt from my extensions.conf:

Code:

; Lights control
exten => 9994,1,Answer
exten => 9994,2,Playback(welcome)
exten => 9994,3,Playback(beep)

[code]....