basic auth on a controller based level
added invitation design