add invitations methods to users_controller