CLOUD-252 add user list

why is this check_token thing copy-pasted 3 times (invite, activate, users) instead of having its own method?