account/user/wgsn/groups/ shows ALL users in your DB and shows two autocompletes

Hi,

Your autocomplete tool which displays when I want to add a user shows the entire user list for Bitbucket. This seems security risk and really should be constrained to my known users.

Secondly, it shows two drop downs occationally on Chrome latest