add and delete friends via ajax closes #8