add login lock and timer to unlock