auth user before friendship create