Security patch:  findUser RE allowed matching subexpressions

Needed to add ^ and $ around the RE.