minor refactoring for specs and ensure todos are accessed from current_user