basic structure
access-token validation basic support, legacy api for old clients
added organizations and user info to response
added organization relationship to RoleUser
refactor some tests
added organization relationship
fixed conflicts, added organization to user controller