updated app to include invitation-only authentication