Add lock user function for admins

@houndci @cgruppioni @georgetmayorga

use the query form: `if current_user.admin?`