So, the good news are that "security code" problem is not reproducible for me with the latest PR1.2 code (checked with two test servers). The bad news is that if nothing can unlock the device (like: empty password, 12345, your accounts or track & protect passwords), then right now I can see only way to unlock the device. It is to flash the device with emmc (all user data will be lost). If it is necessary later I'll write the "How To Flash N9" instructions (I saw at least one video on youtube for windows users. For Linux there is nothing hard to do, because all needed info is accessible with simple command "./flasher --help" ).