HTTPS rewrite???

Ok, as I mentioned this is working, but now they've come back and asked me to do something that should be handled at the app layer. They have a web console that is used to change parameters of the app server. Rather than putting a password on it like they should, they want me to drop any requests attempting to access it. I tried using the 'else' and 'elseif' statements, but they seemed to drop everything. Where have I fallen off the tracks on this???

 
 when HTTP_REQUEST {  
 if { ([HTTP::host] equals "test.domain.com") and [HTTP::uri] equals "/" } {  
 HTTP::redirect https://test.domain.com/app/login.do 
 } elseif { ([HTTP::uri] contains "appconsole" or "qaconsole") } { 
 reject } 
 } 
 

I also tried this with no success???

 
 when HTTP_REQUEST {  
    if { ([HTTP::host] equals "test.domain.com") and [HTTP::uri] equals "/" } {  
         HTTP::redirect https://test.domain.com/app/login.do 
         } else { 
          reject } 
 } 
 

TIA

-DarkSide