added user auth to tags and favorites controllers