Account for lockout when determining if biometrics should be used

We should take into account lockout when determining if biometrics should
be used. Otherwise we will end up in an incorrect state.

Fixes: 118235602

Test: Tap wrong finger 5 times, then use strong auth to unlock.
      When bouncer goes away, tap fingerprint sensor. Authentication should
      not be happening.
Test: With added logs, states are now correct

Change-Id: Ia302827857c19f4d291eeb730687c5b4c332d5de