fix: user cannot CRUD todo list from project they participate in
omg that was a nice typo
functionality against security
update specs