It only uses `User` documents from the organization if the person viewing the page has logged in. We shouldn't be showing users to anonymous viewers.