Fix manage users and tags routes. Refs T682

These were broken by D355. App.user isn't loaded when AppRouter.js
is executed. Switch to just adding the routes anyway, and checking
the users role in the controller instead