This will almost certainly timeout with more than 7000 or so users. TODO: implement some kind of paging.