[TASK] Contacts: Add notifications to user actions (RT-2566)

Also add comments in security.js