Mark Xss_Security_Test as incomplete.
Fix Test::random_tag() to ensure valid tag names (trimmed with no commas).
Add entity to item_tags REST resource - enable GET, PUT, and POST.
Revise Controller_Rest to accept relationship entities (and add unit tests).