Only administrators can use the categories controller

This prevents non-admins from adding, deleting, or editing
already-existing categories.