This is pretty important IMHO.  instead of invalidating the session (for the short term) we could add a before_filter to verify that the current_organization is still valid?