Prevent CSRF attacks on invitation send/accept

Thanks, ajaysinghnegi @ HackerOne!