How do I Lock or Unlock a session when connecting to the Windows Remote Desktop Service over the web?

On the left side of your browser's session window, you should see a tab which you can click to expand the web client options:

side tab of session window

You can then lock or unlock your session by then clicking the button at the top-left to Send Ctrl+Alt+Delete to current work area:

lock/unlock session option