Organization has many users

Shouldn't this be `authorize! :manage, @organization`?