removed lockable attribute in user