fix on user module, correctly belongs to company