Use a referral code for the authenticated user

Uses a referral code for the authenticated user. The code must be valid and not already used.