check for id on org save redirect and fall back to _id

if there's no id then url is /organization/undefined which is a 404

This should work around #532 but the real solution is to make sure that
saving things goes through popit-api's validate-body middleware to stop
the issue happening in the first place