Decide how the Tag permissions should work.

As it stands the routes in tag_router do not require any permissions to access. We want them to require this. 

**This issue is here, more as a reminder to decide what permission we should require here rather than doing the actual implementing of this!**
