findUsers() doesn't need to login again