basic friend auth