Exposed organizations/(index|show) to all

Also rewrote how Role ensures there is only one active role because the previous method prevented you from editing the active role.