restrict search to one organization or one user

plus: Use authentication data (if provided) to have higher rate limits.