Improve update-blocks logging.
Put only access_token in session, leave out access_token_secret.