can now look up users by attributes, (not full querying yet)