Add basic user search

@houndci @cgruppioni @georgetmayorga
I can use ILIKE to make it case insensitive. Though, is ILIKE - and the way how I wrote this search query a security risk? I've read that some people prefer to use (and in the docs too) where and params.