add and configure declarative_authorization, users can only see resources for their company, companies are associated with users during registration