decorate authentication service with lockout feature