Get Invites route returns all confirmation tokens

**Describe the bug**
Get Invites route currently returns all confirmation tokens, not just the tokens of the people who were invited. We should change the confirmation schema so that we record whether this was an organic account creation, or if the user was invited. 