Fix block query, form (csrf token)