create Favorited api
set method requires auth via api