[fysiks]

Simply use SteamID for authentication, it is the only reliable method available (it makes access protected by your Steam account login). If you really want to use a name and password, that is already implemented in users.ini.

Also, what does this have to do with a whitelist?