I'd recommend trying to change your password once more. Be crucial and make sure your token is correct and hasn't expired. You should never give out your password to people, even if you thought this person was your friend, it's best not to give information like that out. If you've tried again and it still doesn't work then change your email password. Your friend wouldn't have been able to change your FH password if she didn't know your email one so change that too. If nothing works I'd recommend creating a new account when the registration opens and next time, do not give your password out to strangers!