redirect command now kicks and bans by username

Instead of banning by hostname, bans by username, so as to catch clients
misconfigured that change host or apply a cloak upon join.