check to make sure user is in correct organization