cleanup parameters of controller.auth, add more new keywords to errors, fix missing dep in models.Tag