Server relies on ID packet to determine client features

This is a bug. Client capabilities should come from FL, not ID. This breaks the semantics of ID when the client is not AO2. There is 0 reason we should be parsing this and validating it to be a valid AO2 version.