Verifying whether the user does belong to allowed organizations

Changed the flow of SessionsController to TRULY verify a user's 
organizations.