categories done except authorization