the API now returns status code 403 for befriending non-existing user