Better check for user already banned/locked

I believe this should always be correct for banning, but may be wrong
in some obscure corner cases for locking.