Accept invitation

Sign in as the invited recipient, then enter the one-time token. Authority becomes active atomically and requires a fresh sign-in.