Make GET /tags unauthenticated