Fixed bug where users could view and edit todos that did not belong to them