updated authorization decorator to handle more than just userids. Finished up the invitations controller