add mentioned? to user model
add authenticate_user! before following/unfollowing