individual contact api crud

addresses #381 

Also changes a bunch of not found type API status codes to 404 (from 403), also some use of 409, 420, 422. Much less 403 now, still have a few left that need addressing.