getApplicationTags is no longer in the controller so it should be dropped from the authorization section.