accounts/ajax/users should return a 400 on an invalid request.
accounts/ajax/tags should behave similar to the users autocompletion
Fix tag select with keyboard.

Previously the selecting of a tag with the keyboard resulted in
the whole tag list being replaced by just the one selected tag.