bug-fix: customer must not be nil. we must not use nested url.
show and destroy must be possible w/o customer
scenario for testing file upload (company avatar)