fix attack on /-/all/since?stale=update_after&startkey=2 close #336

Also add modified_time key to tag