fixed task view by removing owner check but maintaining membership check in controller