Bugfix: user search api was returning all users regardless of query when signed out. Closes #384.