make current_user only query once per redirect
build user-task association
set before_action (authorization) for task controller
set tasks template for each user