If we force auth and use current_company we shouldn't have to do this check