ETPro lua scripting

Hello,
I'm trying to create a simple .lua script that would disallow users from using certain commands until they authenticate themselves using a simple command such as /login.

The only problem is that I'm dabbling with the unknown here, as I've never touched LUA before in my life. Here's what I have so far, which I mainly achieved by shamelessly combining elements of the TJMod.lua thing.

Quote

loggedin=0

function login(clientNum)
loggedin=1
et.trap_SendServerCommand( clientNum, "cp \"You're now logged in\n\"" )
return 1
return 0
end

function block(clientNum)
et.trap_SendServerCommand( clientNum, "cp \"You're not allowed to do that\n\"" )
return 1
end

function et_ClientCommand( clientNum, command )
if command=="random_disallowed_command" and loggedin==0 then
block(clientNum)
return 1
end

if command=="login" then
login(clientNum)
return 1
end
return 0
end

However, the problem is that it simply doesn't work. When I enable it on the server, typing in the "disallowed commands" still works and the /login command will just respond with "unknown command". Another problem is that it's likely horridly shitty and poorly done.

So, how could I make this work as intended? I mean, so that players cannot use command /random_disallowed_command before they have done /login?

Also, is there a way to do the same for cvars, so that people wouldn't be able to set, say, cg_autoreload 1 until they do login.

PS: Sorry for fucking up indentation - it's just Crossfire.