fix tags

- custom `TagsController` filters behaviour is no longer being used
- add required policies
- move tag's edit link to a button
specs for tags
make tags routes more restrictive