tweaks to get perms to work for org and new zone

org_id == new and zone_id == new were both being checked and failing.
special case code for "new"