[LFTILI-38] first pass at user search endpoint