lock authorization for vocab upload page