Added Pundit, tied user to Todo