scoped todo lists to user, all tests passing