Add spec test for user
Add user model
Move user logic to separate class
Fix users see only todos that they own