server search for all users and for users by login

resolves HACK-1234