fixed autoinvite feature: we need to check if the user is authed