Fix user onboarding, org creation is guarded by email verification

[duckduckgrayduck]

The user onboarding flow does not enforce our guard that only users with confirmed emails can create organizations (we want org admins to have confirmed emails).