tasks controller requires user authentication