builders for contact and pendingcontact
add checks against authorizing pending contacts where the client or subject user do not exist