Good stuff! As far as keeping him out...you can't. A determined individual will get in no matter what, you and your staff will just have to be vigilant and ready to "spam clean" his account away when spotted. There are some add-ons that look for duplicate ip and similar tactics to spot these...