Use permission_required decorator

This decorator was introduced in global search branch, using it for the
tagging code for consistency.
Cleanup: remove unused includes