Get main APIs ready, including list/create/delete tags, tag a card, list/create/delete decks, deck a card. Authorization is implemented. A user only has permission to his/her own card.