Make org ownership explicit on create

__Proposal:__
Org creation should not use the auth system to determine ownership

__Current behavior:__
When a organization create request is made we try pulling the auth.UserID from the context. If we do have that piece of information it will create a relationship between the user and the organization. This implicit assumption means it is possible to create an organization that has now owners and thus is unusable.

__Desired behavior:__
We should make this connection explicit instead of implicit.

Start by tracing the organization create request and how auth.UserID is read from context. Determine where ownership must become an explicit input or operation, then verify that organization creation cannot produce an organization without an owner.

Written by the indexing model from the issue text.