FIX: invited users get clearer messaging when setting a password for the first time