Create route token restriction on todos module