Moved Kernel::System::User to use bind variables

Also I added a few unit tests for UserSearch().
These unit tests would not work on SQL Server before; but now
because of the bind variables they do.