added user session control to application. more logic in todo controller
removed nested resource for todo completion