add locking to users table