db fixes for tag_permissions
shared code for custom permissions checking in canvas
tweaked the login page error style