changed resource lookup in todo#destroy to be more secure. Since this will result in a 'record not found' error, added a rescue_from method to todos_controller.rb