Merge pull request #6630 from FreeCodeCamp/fix/is-cheater

Fix isCheater/isLocked not blocking certs

server/boot/user.js

@@ -307,6 +307,8 @@ module.exports = function(app) {
         }
         return findUserByUsername$(username, {
           isGithubCool: true,
+          isCheater: true,
+          isLocked: true,
           isFrontEndCert: true,
           isDataVisCert: true,
           isBackEndCert: true,