Allow user to accept invitation

closes #3081
- added route `/ghost/api/v0.1/authentication/invitation`
- added accept invitation
- added signup with token
- removed check() from users api
- fixed promise in resetPassword()
Maybe I've put the comment in the wrong place. `add()` is removed and `invite()` will be renamed to `add()`, but we need to implement the owner issues first :-).