setting the authorization request flag if the sending user isn't an authorized contact yet