[CSRF] No Csrf protection against sending invitation to join the team.

Summary

A Cross-Site Request Forgery (CSRF) vulnerability was found on a "Create Invite" endpoint, which could result in any users being added to a team by tricking another user to run this Proof of Concept. We thank @imran_nisar for reporting this to our team.