users can be locked now