Added todolist add/remove and better user security

Users can't see the add and remove todolist buttons on other
user's pages and if they try to type the delete url it will
block them from performing the action. Users can delete their
own todolist and add new ones.