fixed xss attack configuration
added block to dashboard
fixed timer
fixed invitation