cleaned up category view, protected some admin actions