Fix issue when adding a user to the Organisation member list

Error caused by the ui pulling down a user other than the currently
logged in user. Fixed by adding new route. Proper middleware must
be added to prevent user from adding badges not under their control.
Closes #521