claimInvite(token: string): string
Marks invite token used and returns the inviter's id. Call it before the
async account creation, and releaseInvite if that fails: checking
first and marking after would let parallel sign-ups share one invite.