Removed authorization from category controller