add flask_cors.cross_origin annotation to tag.py.