Make invitation token a credential

Now that the code is public, having a hardcoded string seems even less
prudent...