add forgotten checks for cacheword lock and setting for password change