No longer filtering by facility here? Probably should be, right (based on what you're trying to do)? In that case, might also be good to do the query once, above, and store it, then use it again. There was a separate Trello issue somewhere around allowing people to login "via" the wrong facility, as long as there was no conflict. So, if it didn't find the username that was trying to log in at the specified facility, it would do a general search like this and find it at across facilities. Could be cool, but not sure that's what's being done here.