Added auth and tests for categories controller