rest: bootserver can be fetched current organisation
rest: use same authorization in the all organisation API