fixes #4795 - sanitize 'organization_id' param to a string, BZ 1079981