change method to POST for lock / unlock Asset

confirm_zero_out_text_for helper
authorize! lock / unlock