add spam protection

[pranav-singhal]

• limit the number of unapproved requests a user can send to someone
• create a handshake/friend-request mechanism for being able to send messages