fix handling of friend requests; add online only flag