getuser_by_filter now actually returns user objects, as well as enforces an exact match.