We can't load all users, this is not scalable. There needs to be a way to not load all of the users. For example, use `/api/users?query=foobar` to only get users matching the search term `foobar`