getFriends is ugly, should be changed to username/friends

[cor]

It is kind of ugly to use api.woording.com/getFriends and give the username in the body.
We should change it to api.woording.com/username/friends and also disallow users to create a list named "friends" as this might cause issues.