Orgs endpoint tweaks

- Allow us to point the client at different endpoints without having to set both `HEROKU_HOST` and `HEROKU_MANAGER_URL`.
- Simplify Auth.verify_host? a bit