Secure the process for inviting a user to an organization

1. Removed the "search by email" API
  * (This was hastily added, and reveals the user database to another authorized user. Let's not.)
2. Added an API for "Invitations"
 * (Make roles opt-in)