Get users by usernames.

This endpoint will also check previous usernames. Does not require X-CSRF-Token protection because this is essentially a get request but as a POST to avoid URI limits.