Use Slug API endpoint for /settings/users/user

Closes #4350