add Lockit for user auth