fixed error - using id instead of to_param for slugs
also fixed categories controller so can use show action when not admin