Don't check on access user profiles on the friendlist field handler

The current friendlist field handler checks for the permission "access user profiles" to be shown, though this seems to be the wrong permission, because you probably want 'have relationships with friendlist' instead.

So let's use the other permission in the handler.