Addition of block token to ensure json block rendering is only available to...

Addition of block token to ensure json block rendering is only available to those who can place blocks and make sure access denied check works