Jhbate/invite by key

@kentquirk could you take a look please. I still need to do a call,with a server token, to get the inviter user profile but that means a change to go-common 
This if logic kinda scares me.  Can we make this method take the `res, found, err` and have each of the call sites call the correct `Confirmations*User` method?