public TodoItem Post(TodoItem item)
        {
            User user;

            try
            {
                user = _sessionMgr.GetUserForRequest(Request);
            }
            catch (UnauthorizedAccessException e)
            {
                Response.StatusCode = 401;
                return(null);
            }

            return(_todoRepo.CreateTodo(user.Id,
                                        item));
        }