moved check if friends is enabled
relaxed permission requirement to staff+friends.review
pinning django to 1.5