added category controller authorization

tests passed
fixed some products controller specs

not sure if allowed
updated products controller