Added token for personalized photo upload link. Fixed access check for
photo upload to call invite_init() first, to encure invite is fetched
from query string.