moved before filter to general admin controller
Added authorization checking to admin orders
added authorization stuff to admin categories