ui: add locking session below lock
ui: list sessions on the nodes and allow invalidation