"Who" is not the subject of the relative clause, it should stand it the dative case, which is "whom". The second preposition should be "to" because one allows somethig _to_ somebody.
New words, one handy idiom, and a 2-minute quiz — delivered to your inbox to keep your streak alive.