add some cat/user associations, validation
don't use before_filters to set variables

You're old enough to know better, sang Paul McCartney.