Card #226 added getCurrentUser() to abstract base class
updated contact point security and tests