check for locked user