require current user to see friend requests