"fixing" issues where adding a note into a shared board would set user-id as your persona id. not a huge deal, but not really "correct". now the user id is set properly, but it also uses the passed-in persona id to check permissions against (best of both worlds)
adding support for "deleted" invites, adding get-invite-by-id-code, splitting key and encrypted key (key is sent in email, encrypted key remains in DB). this means that less info has to be sent over the wire, but the encrypted key cannot be decrypted with data in the DB.