API: Don't require 'users' parameter to contain all valid usernames