Improvement: Prevent invite token from being consumed

[DonKoko]

Instead of sending the link with the token in the email, sent a link to a page with the token in the params. On that page add a button "Accept invite" which actually consumes the token.
The purpose of this is to prevent tokens being consumed by anti-spam software which "clicks" links in emails to check them before the email reaches the client.