Cleaned up contact validation, added form action url injection for spam