Only allow invite to be accepted by user with matching email

See merge request gitlab-org/security/gitlab!1557