Admin support to disable invite codes and users

[gnunicorn]

Right now if someone does something shady the admin can only disable the entire feature. Instead we want some better facilities for the server admin to manage the list of all tokens and allows disabling them and remove the feature for users entirely. We might split this up into several separate tasks to be done later.