Owner cannot manage private org

[vgeorge]

If an organization is set as private the UI won't show the list of teams and staff. Steps to replicate:

• Create a private org at /organizations/create
• Visit organization page, it won't show "Staff Members" section
• Edit organization details, set it as public
• Visit organization page, it will show "Staff Members" section

We should look into the permissions middleware and add test coverage for this.

cc @kamicut @batpad