well, found an interim solution as follows:
(a) on the client side create a metajson with client credentials and pass it on to the connect arguments.
(b) on the server side on the BeforeConnect event retrieve the metajason and check connected clients bindings if they contain same client credentials as the client attempting to connect. This way a single client cannot connect twice.
(c) on the server side on the afterconnect event bind the client credentials to the specific client.
I am assuming that if the server detects a client disconnect will remove the user for the connected clients list, is this correct?