enable confirm for deletes
add in private flag for todos, prevent publishing of private todos'