More Friend Fixes

Repushed server-side support.
Also secured the allow/deny calls for Admins only