Note this function is synchronous and ignores errors.
the user object to alter.
whether or not the account is locked