When you logged into the device did it authenticate with the ACS or did it use a backup method to authenticate? (one way to know would be to look in the ACS reports for the successful authentication.)
It might be helpful if you would post the config of the router (changing passwords etc).
It might also be helpful if you could post the output of debug tacacs packet.
HTH
Rick
HTH
Rick