scan for users (quick & very dirty...)