flask backend Friend API