Added validation that users can only edit/view their own todos