remove AuthPlugin usage from User::isLocked()

The removed logic always evaluated to literal false.