Some hot-fixes

removed the default read permission on friends' doc owner
fixed a bug that gave access to the private fields of a friend profile when the friendship relations was created
fixed #200 _creation_date has no time zone