update category and lesson

remove, use current_user in controller