switch from using lists of usernames as parameters to lists or querysets of user objects