check and populate req.session.organization and req.session.user if missing when customer directly links from Email