added before_filter to todo controller
added user logic, and logout fx