nest company under user for routes
add user_id to tables
user id allowed in controller strong params
all controllers index added .where(user_id:current_user.id)
user id hidden field added to all forms