fixed before_action for tasks controller so users can only manage tasks they are members of