revisit invitation acceptance

[migmartri]

Currently, when you receive an invitation to an org, the way to accept it is to register/login auth login.

This can be confusing and not documented anywhere, so we might want to change the approach while we don't have an actual acceptance method (i.e link that a user receives). For example, we could make it part of each request (although that has a tax hitting the invitations table).