server-side validation (contacts)