Minor fixes to receiving friend requests

Friend request POST needs to be CSRF exempt