Fix POST /followings [+migration] [+dev dependency]

- handle types array
- handle permissions correctly
- handle import correctly