Implement `GET /user` and `GET /user/friends`.