add unlock restful api