admin_user_search: also look up original query, not just preprocessed version

Protocol.receive: treat Ghost's block, a Reject of a Follow we never sent, as blocking the bot user