diff --git a/ToDo.txt b/ToDo.txt
index 2131bdb..854f2d6 100755
--- a/ToDo.txt
+++ b/ToDo.txt
@@ -11,6 +11,19 @@ Server:
     Admin Functions:
         Dont inforce Admin on the API side
 
+    Authentication ProductController
+        When the create account is called. right after the getaccount is called.
+        Have all New for database return the object they create
+
+    Update API
+        Split apart the different routes and Functions
+        No more new / update -> only get / set
+        Make all apis return statuscodes
+        make all input types form's
+        make all getLoggedInUsers() -> make sure that i cant just call getLoggedInUserID
+
+    Need to timeout email reset tokens
+
 Client:
     Program
         Probably need to turn on cors at some point
@@ -33,5 +46,8 @@ Client:
         No way to minimize the UI topbar on mobile
         Not themed on mobile
 
+    API
+        Some of the API's Changed. Need to go back and update the client API calls
+
 database
     Need to create all the forign key policies
\ No newline at end of file