Added AntiForgeryToken attributes to all form posts. Fixed session bug that would "forget" about previously invited users when adding / removing users from an existing event.