Block a user
ALBS-444
I can get hash here, because when I use return_json flag, self.authenticate returns full JSON response