Update the endpoint ```/user/{userId}/friends``` with access control and more elements in the response

[JRB958]

Description

As a user, I want to update the endpoint mentioned so that I can have permission to view profile information and include more details returned.

Story Points:
Priority:
Risk:
Child Tasks:

Acceptance Criteria:

• update the permission to still require authentication but allow access (not respond with a 403)
• update the response to include profile photo, and not only id and friendship id and username
• Add profile picture to Friend request

Task Breakdown:

Implementation Breakdown:

Blackbox Testing:

Regression Testing:

Demo Steps: