pessimistic concurrency control