CREATE favorite [POST]. Still needs validation.