FEATURE: Add new site setting to restrict how many times you can click on an

invite to "passthrough" as logged in, with a default of 0 hours. Also changes
default invite expiry from 7 days to 1.

config/locales/server.en.yml

@@ -713,6 +713,7 @@ en:
     force_hostname: "DEVELOPER ONLY! WARNING! Specify a hostname in the URL. Leave blank for default."
 
     invite_expiry_days: "How long user invitation keys are valid, in days"
+    invite_passthrough_hours: "How long a user can use a previously redeemed invitation key to log in, in hours"
 
     # TODO: perhaps we need a way of protecting these settings for hosted solution, global settings ...
 

config/site_settings.yml

@@ -247,7 +247,8 @@ users:
   enable_names:
     client: true
     default: true
-  invite_expiry_days: 4
+  invite_expiry_days: 1
+  invite_passthrough_hours: 0
   invites_shown:
     client: true
     default: 30