Sorry to be pedantic, but the 503 response is not correct. It should be a 400, 401, or 403.

Also, if you really want to boot somebody (or a device at least...), you could block with a x-forwarded-for IP address rule. Otherwise, I can just clear cookies or go incognito to lurk/read.

/nerd stuff