fix: login_required for closedTask controller
create and update task using SQLFORM
fix: multiple select input not showing preselected users
show task list with attachment and download link
in allTasks view, no need to check group membership