update categories, groups and topics controllers to check for cancan permissions