A little bit of auth rules and cleaning up registration (moved defining of company-user relationship from commandHandler to repository)