lock signup in sandbox