Add user_friends permission