users add can send a receicve friend requests

these updates/creations should happen in a transaction. also, you could probably extract a service object for this. I know you like them