bugfix #103 clients lock up by adding two checks.

[plaza-in-a-heatwave]

• ensure that the client is actually locked before trying to unlock it
• add a failsafe timeout so that clients will unlock anyway after 20s.

additionally add a way to log client bugs server-side using the /bug mechanic.