@@ -79,7 +79,7 @@ app.use(passport.initialize());
app.use(passport.session());
app.use(function(req, res, next) {
res.locals.user = req.user;
res.locals.token = req.csrfToken();
next();
});
app.use(flash());
The note is not visible to the blocked user.