Check whether the account is locked or not before authenticating to be able to redirect to unlock page.
Changed locked process to not clear login incorrect attempts.