lock user from leaving app