removed the default read permission to friends' doc owner
fixed a bug that gave access to the private fields of a friend profile when the friendship relations was created