Now that email is non unique, we should find users to invite by username (but show their email address as well).