add spec

spec/requests/organisations_controller_spec.rb

@@ -25,6 +25,11 @@ RSpec.describe OrganisationsController, type: :request do
         get "/organisations/#{organisation.id}/users", headers: headers, params: {}
         expect(response).to redirect_to("/account/sign-in")
       end
+
+      it "does not let you see organisations list" do
+        get "/organisations", headers: headers, params: {}
+        expect(response).to redirect_to("/account/sign-in")
+      end
     end
   end