tag route
don't include auth middleware in wrap