refactored spec and todos are accessed from current_user