implement controllers
perfected authentication and authorization
Create client script API.
add /contacts/search to API.