fix security
add friend, remove friend, fix sidebar modal