Fix unauthorized calls
We need to block calls to phone outside of a campaign scope. No calls should be made to anything that is not a CampaignContact Phone, and it must be made only when a campaign is active.
Verification should be made server side. EIther by intercepting the call before it goes in the backend, or by connecting the backend to the campaign database.
The later should be avoided to keep things separated.