block a user for a time period