Friends endpoints

Lots of changes to switch to oauth REST API for handling friends #919