Currently anyone can signup for the fitness challenge. That means someone from outside of the organization could register. It also means someone could register using some one elses email address. Instead, invites should be sent out by an admin and that invite should be required to register.
If a user tries to hit the site without a valid query param, they should get a message saying that only invited users can register and that they should reach out the the fitness challenge admin to get an invite
Currently anyone can signup for the fitness challenge. That means someone from outside of the organization could register. It also means someone could register using some one elses email address. Instead, invites should be sent out by an admin and that invite should be required to register.
If a user tries to hit the site without a valid query param, they should get a message saying that only invited users can register and that they should reach out the the fitness challenge admin to get an invite