user/create controller requires a valid invitation code :)