Start fix on auth; -debug c.log company controller

Still need to check if user is allowed to view specific resources based
on req.user.id