fixes #3736 - users API uses login name as an identifying attribute