add example of testing friend authorization