Create TODO.md

Going through coap-18 and noting some requirements in how the server should respond to options in the request