Accept an invitation token. The caller must be authenticated.
Validates that the token is not expired and not already accepted, then adds the user to org_members with the invited role.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.