add User#locked_at