add rest api for content categories

I think we're mixing up our verbs here. `PUT` is meant to be idempotent, ie you supply a payload with a UUID and that should either create a new object with the given uuid or update the object with the given uuid.

POST isn't idempotent and more closely matches a "create" statement.