User invitation feature - allow :invitation_token in strong params