fix passability checking server-side, remove Rectangle#contains(Vector2)