changed getCompanies to use loadAll which respects user permissions
fixed the broken department addedit form