fixed bug that allowed anyone to delete tags