fix the privacy/safety nightmare you're about to create with invites

[Kara Brightwell]

currently (as of #80) you can add any user to any campaign you're an owner of without confirmation. this is bad. the alternative is a system of invites & pending users that i don't have bandwidth to think about right now and i just wanna ship #29 plz