add basic authorization
categories are working,ready for deploy