add unlock-cloudstead API endpoint and test