fix: user can add himself as friend