each device conn own a lock for onlineUsers map