Sorry but this is crap. It provides a terrible user experience, no link-level encryption and is trivial to bypass by spoofing the MAC address of an already-auth

Sorry but this is crap. It provides a terrible user experience, no link-level encryption and is trivial to bypass by spoofing the MAC address of an already-authenticated user. If you need actual auth, do it properly with EAP, otherwise just leave the network open and don't waste anyone's time.