adding a lock on cleaning expired user