# Pastebin iuQxOIX3
if client.auth_state == "start" then
    -- ask for username
elseif client.auth_state == "userin" then
    client.user = data
    client.auth_state = "passin"
elseif client.auth_state == "passin" then
  -- Check client.user against password here. if failed, set auth state to "start" and perhaps increase attrempt checks.
end