Block a user
[Minor] --verbose flag is defined but never used
[Bug] doc delete confirmation prompt is dead code
[Bug] adminOnly middleware ignores tokens from .auth-tokens.json