merged routes
Added /friends route with authentication requirement