implement GET /pendingcontacts with sort order