Allow 'analyst_comments' tag from web log form

We normally require permissions to add tags to log messages or to
create logs with tags attached, but we want to apply the
'analyst_comments' tag to log messages posted from the web form
no matter what, so we add a check where that doesn't require
special permission if the request is AJAX.