fix users being able to unlock themselves