only include "+" button when user is an Owner of the org

Fixes #13.