Force User to Accept Attacker's invite [ Restrict user to create account]

Summary

@sammam has found an issue that would enable an attacker to restrict any user from creating a new account without accepting an attacker sent invitation.

We would like to thank @sammam for reporting it responsibly to our bug bounty program !