Fixed small error in the remove-friend API call.
This is a fix for issue #16.

Activation links should be sent out correctly now. Now the mail uses the
SITE_ROOT from the config file instead of the domain taken from the url
in the address bar.