Two-thirds of companies now have a medical marijuana policy