fix auth.blockUser