fix todo update route to allow for id matching in mongo