added algorithm to save user's reordered or moved cards
added policies to invitation controller to prevent sending invitation to user already in