Users

Search by email (hashed client-side). The server never sees the raw address.