protecting mikrotik from hackers

i am new to mikrotik, I have a pc mikrotik server (3.30) with hotspot and DHCP server config. the problem is that i had assigned An IP address to every client mac , a user name and password
but there is some who could change there mac address to an active mac wich alredy had been loged in , take the same Ip Address Which i had assigned to this mac and get the net for free
then what the solution to make this person take another Ip after changing his mac to an active make
or any solution … please …
thnx