A valid invitation token is required. The token must be non-expired and must not be previously used.