fixed bug when orphaned ed_org is one in that a user is directly auth'ed to
changed orphan logic to support app enablement and eliminate orphan repeats