Implement cryptographically-correct pass validation in the server-side part (renew_lease)

Like #40 (closed) but for renew_lease