Add lock user function for admins

@houndci @cgruppioni @georgetmayorga

What if it's on, and they hit this controller? Then they're no longer locked.