lock and confirm user added