set edit interface tab to view tab when click edit button

use the window.location.hash to work out which tab is currently selected
and make sure that tab is selected in the edit interface before
displaying it.

Fixes #522
check for id on org save redirect and fall back to _id

if there's no id then url is /organization/undefined which is a 404

This should work around #532 but the real solution is to make sure that
saving things goes through popit-api's validate-body middleware to stop
the issue happening in the first place
add passport and related auth modules

update package and shrinkwrap