duplicate friends possible

[defrex]

While the user is viewing cached data in a client they will still see a friend request button. If they click it before the data gets refreshed, they could create duplicate friend objects. This should be disallowed in the server.