complete Phase I
don't forget to make sure we have a current user
complete Phase II: add friendships
make friending AJAXy
complete phase IV; also, retrofit nested route :-(
complete toggling of phase IV