Permit organisation_id for user needs

Follow up fix to strong parameters changes