Fix security issues with chat handler.

In the current scheme it's the invsrvlauncher who reports that an
instance has been launched, and a set of installers have been built,
for a particular inviter, so we don't need to accept messages from
arbitrary users anymore.

Also, the check for sender jid was wrong.