lists api for index, with and without scoping when corrrect password provided
lists api controller, with error handling, with rspecs
start thor cli authenticate, users
create user from cli
todo cli authenticate current user
cli show and create lists