limit Lists and Todos returned to client by userId