Now that you've set that up, nobody can connect.
No, they can connect. You don't need (can't have) a VPN tunnel to connect. Once connected (open access point), however, the router won't route anything past itself until the client creates the VPN tunnel.
Computers are not intelligent. They only think they are.