Give specific user access to todo lists

[Tom Aratyn]

I should be able to give another user R or R/W access to a todo list.

This would be an extension of #22, I'm thinking.