Add unit tests to check that we can't search users with an hidden profile