GET /users/friends and POST /users