add get authenticate user's todos with /user/todos
update Todo toJSON instance method
update list and create action and add getById