restrict delete tag operation to only logged in users