Support friends endpoint

@leahsteinberg 
you don't need this guard in a test, since the test will just fail if this is false.