InvitationRequest: require url (memo) for invitations

otherwise validating requests is kind of difficult
user tree: show new users in green
don't need to save invitation request
rails 3.2.16 and assorted gem updates
prevent diffbot from trying to read pdf links