Add userid to address book query. Fix owncloud/security-tracker#48