accounts: add mutex lock