change password lock behaviour