fix multi user logic

- use union operators rather than indexOf when testing for user matches
(as both user strings may be lists)