Check permissions before returning a contact number for SMS

Contact number lookup now requires read access on both the contact and reference document.