allow all users (not only admin, will want to change later) to invite/add users