lock user out of account (solution refactor)