tightened up the todos api controller impl.