auth fails if company is inactive