add permission check to /:name/:tag
Merge pull request #334 from cnpm/fix-permission

add permission check to /:name/:tag