block auth