Fix whitelist_add setting the invitedBy field of the wrong person