Remove the friendship/request between the caller and a user (either party)

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.