Add inbound contact attempt, notifications. 

Currently, when a user adds some contact are they automatically added as a contact? It is possible that the address of a user is exposed, but that should not mean that they wish to expose their address. 

Consider adding some mechanism to allow the approval of inbound contact requests. 