Securing urls

Using associations for security:

Instead of:

@project = Project.find(1)

do

@project = @company.project.find(1)