lockService, better logic, false admin fix

cleaner logic

lockService was setting ALL users as admins ($userType='admin'), fixed