add xss-lock for slock