updated friends api
removed auth from friends controller
added users/messages