api retrieval of suggested users now requires current user to be superuser or in Contributors group