TODO contact user form
Sat Dec 5 2009
A logged in user may be able to send email (contact) a user
not directly, but via our form using captcha (even for logged-in users?
maybe...)
We should limit number of contacts per logged in user per 'n' hours to
prevent a spam.
we should also store all such message in case we have to review a
complain.
If user being contacted is registered, we can then also see if he is
logged in and if yes, then send PM