controlpanel: rename GetUser() to FindUser()

Avoids conflict with CModule::GetUser()
Modules: use public API

Avoid accessing protected member variables directly, so
there's a chance of cleaning up the module API later.