Private Instances

We need support for creating private, invitation-only instances. I implemented this by adding a flag to the instance model and adding logic to the instance_request decorator to validate the user and redirect to login or a new, top-level "not available" page as needed.