add a default value to company_id

You don't need to put this check, because in the security rule, you also include the possibility of company_id=False.