Guest with modified permissions shows up as a new attendee after page reload

How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

Steps to reproduce

as moderator: M
as guest: G

1. M - create public conversation with password
2. G - enter password and join the conversation
3. M - edit permissions of G
4. G - reload the page

Expected behaviour

New session linked to the same attendee

Actual behaviour

Chrome

Incognito mode, and different Chrome account:
On page reload guest received a new session and a new entry in attendees list:

Firefox:

Reload works fine, guest received a new entry only after closing tab/browser and opening again:

Non-reproducible anymore after clearing the cache:

Chrome account after this procedures made two requests to /apps/spreed/api/v4/room/{token}/participants/active, first resulted in 412, second - 403 with { error: "password" }

Talk app

Talk app version: tested on main branch
Custom Signaling server configured: yes
Custom TURN server configured: no
Custom STUN server configured: no

Reproduce the moderator and guest steps, then inspect the requests to /apps/spreed/api/v4/room/{token}/participants/active during reload. The fix is complete when a guest with modified permissions remains linked to the same attendee instead of creating a new session and attendee entry.