fix unlocking via web
states implement json.Marshaller