Fixing a major security flaw.

User could make post request to change status of block even if not an authenticated user. This is now fixed.