Add lock user function for admins

@houndci @cgruppioni @georgetmayorga

This was a bit of a conceptual choice, because locking users is handled under settings.