Require 'manage tags' permission to access tag UI

This adds a filter to the TagsController to assert the user has a 
'manage_tags' permission.

This also updates the associated functional and integration tests so 
that the stub users they test with are also given the permission.