add list action in FavoriteController, indexAction now for admins only