add a friends view, action, route... refactor user controller