upload user files and lock profiles