CDB-4244 Only revoking publicuser privileges upon org owner removal

https://cartodb.atlassian.net/browse/CDB-4244
I guess this is the critical part. Would be nice to add an spec for this case.