added csrf_token to block url, minor fixes, minor style improvements