Allow login without OrgId

OrgId only has to be passed for self service users which is
not always the case in API usage