Create controller and view for Todo and Category

Simple protection: Users can only edit, update and delete their own
categories and todo.