New Customer and Seller Contacts APIs

The existing /api/contacts is insecure and incomplete. This adds full CRUD support for customer and seller contacts.