Adds auth token to add/remove friend forms; improves urls for ajax