add new friends route, working on validations