added getFriends route. sending back dummy data for now