We should allow ``organization=None``. Otherwise users will always have to have an organization to login.