the unlock command was not checking the correct hash key to match the user name
Remember that true locking is not possible in a DVCS; see doc/locking.mkd for details and limitations of what is offered here.