Feature spec & README added

Also refactored out directly 1-1 relationship from User -> Organization
Organization hierarchy in place with permissions

Permissions take precedence closer to the organization in question
(i.e., admin to root but denied to a child node leaves you with denied)