Users are now only ever a member of 0 or 1 orgs

This means simpler code in Signon and apps using organisation membership, and
simplifies Signon conceptually.

Nothing is using "organisations" yet.