change /user/todos URL pattern to /todos
add registration form validation
add error handling for invalid login credentials
add error handling for user profile updating action
add error handling for user password updating action