I had gotten rid of our previous `allowed_organizations` call since the user had a direct relationship to organizations. However, the stupid admin user is treated so differently than other users that they are not associated to every organization and thus we require special logic. So you are correct that I need to bring back allowed_organizations since we use it in a few places.