The `user_owner` strategy shouldn't error out if the user doesn't belong to an organization (super-admin).
Organization.users doesn't error out if an organization_id isn't passed in.
An admin should be able to share a survey with any organisation.