required login, no test fix in todo list controller spec