authenticate_inviter! needs to return a User object