Replicated logic for User & Organization. Can't we abstract this code into a mixin? Why leave scope of bug injections, till the point of time we are not at a high testing coverage.