clean implementation of friends
fix: user can add himself as friend