Check user's org for MCCA

Upon rereading this issue, it was brought to my attention that the ECA check is not checking the user's org for an MCCA. It is checking only for one signed directly by the user, which is insufficient.

An additional org document fetch needs to be added