Extract secure token generation to a service object
Clean up admin/tags_controller spec