It's not just the SSID, the public IP address also needs to match (which is harder to spoof), see my other comment here: https://news.ycombinator.com/item?id=19792374

The external server is needed to create a persistent chat that stays around even after every participant has left the network.