username search doesn't need login