find user from sudo