http-push: add back underscore separator before lock token