all rests work with new auth system, tests for tag rest