refactor(invite-user): move session to middleware.locals, rewarding
to group.join. Allows invitees who already play to reward inviter