Only allow invited users to sign in for the first time

This would probably consist of giving existing users the ability to generate invitation tokens for other users to use when signing in for the first time. These tokens may or may not be associated with particular user information depending on the security we wish to enforce.