The check for user_has_company? should be global for all actions where the user is signed in.
Added guards for some of the invoice fields.