Authorization added to controllers: category, admin, item, order