Add POST /followings validations

- when already following
- when unauthorized