added friend form and controller actions