the existing endpoint is a GET, and so leaves email addresses in log files. we've got an existing POST find_users_by_partial_email, but not one that matches on a whole email address.