changed the Padlock.lock api to take the user object first and a splat of lockables
bump to v0.1.0