standardize permit params. add gist block. video block should grab the id delete content_block from host app