Your friends only option is to contact SE customer service, without the removal code only they can remove the token from their account.