GET routes are not protected against CSRF. This commit changes the needed URLs to POST and replace simple links with forms. Thanks @fdb-hiroshima for noticing it!
Make sure everything is translatable
And hide the block button for the local instance
Bat