API contacts mass update

There's a fair bit of hackery in here to get all the new tests passing OK -- contact.update is new and contact delete was undertested (and, indeed, had fallen behind the state of the redis DB as is.) The main part to check is probably the new code for the POSTing of contacts, and also the logic in contact deletion could use review.