verify user can reject and approve friend request