user and todo endpoint worked on