in rails companies controller, don't check for auth on show