[core] Find User API properly states that it requires a query

  * Also added a default value for max hits