fixed #6 - contacts page leaking user data