added url lockout to newuser and login