It appears that there is an issue with tacacs and software version 5.2(1) for the Nexus 7010.  When you set up tacacs it lets you authenticate to the tacacs server, but it also lets you use the local database as well.  Normal behavior would be to use only tacacs except when the tacacs servers are unreachable.  Then you would use the local database for authentication.