* The key is exposed in the URL. This means that the Owner could in theory manually construct the invite URL and impersonate the user. Is there any way to avoid this?
* The email on the invite page should be pre-filled.
* I would drop ignore the message field for now. Just used the canned message.
* After submitting the message just redirect back to the dashboard: on_submit:redirect:/dashboard
* There is some CSS we use for all the forms which you can copy from create_user or some other widget.
A few issues;
* The key is exposed in the URL. This means that the Owner could in theory manually construct the invite URL and impersonate the user. Is there any way to avoid this?
* The email on the invite page should be pre-filled.
* I would drop ignore the message field for now. Just used the canned message.
* After submitting the message just redirect back to the dashboard: on_submit: redirect: /dashboard
* There is some CSS we use for all the forms which you can copy from create_user or some other widget.