- deny user to user notification
- clean endpoints