add require login
add before action to see buddies
add errors to redirect page
add require user to controllers