Update the To Do section of the readme

We've done a couple of the things, and I realised we missed adding returning user metadata for GET Object requests.