finish authenticating categories REST