Only include shared users if the request user is the query owner
Merge pull request #92 from cbmi/issue-90

Only include shared users if the request user is the query owner