no auth needed for categories list and info (show action) routes