Add an API controller for Organisations

This will be immediately useful for Signon to be able to manage user membership
of organisations, but will come in useful for other purposes too.