Don't allow invites if local logins are disabled, since it provides a way to bypass external auth