nfsd4: use cl_lock to synchronize all stateid idr calls