add require_login to app, validates category_id and change some css