Protected invoices controller

Also fixed urls for invoices#prettyView, invoices#email_confirm and invoices#email.