Fix tag system, add initial password behavior

...the rad-user uses...