This followed #5913 and rP24728. It validates the password for actually rejoining the game, so even a player that knows the connection data cannot join.
Very similar to D3075, but that one is for the host and will have to go alongside.
Probably a necessary functionality for dedicated servers. Refs #3556