sign out user if they are not approved or locked out