user authentication needed to list companies (not admin)