/friends/get now returns the users (whithout their password)