[server] correctly match client state so it's possible to kick zombie
clients off the server