check if user locked