Calling `client.unset_was_locked(request.session['uuid'])` on a locked account will unlock it. We need to check if the account is locked and prevent unlocking it.

I could change the `elif` to an `else` but then we'd be making a call that we know if pointless.