I have not tested with Docket, but do additional participants need to sign up? Ideally, sharing the URL should be enough.

That also means that the URL must be unique enough to not be guessed, and that the person initiating the session should be able to boot off users and lock the session so other users cannot join after every wanted user joins.