Support staff locking on unit page

STUD-1873
In general, I think we should be using existing_item.location (I'd suggest changing it to existing_item.location above in revert_to_published). The usage_key comes from the request, and it may not have the course run (old URLs). By the time it is resolved by the modulestore, the course run is filled in and we should use the location field.