extra checks on creating org_user