The $query & $courseid params to the core_search_get_relevant_users external method are not being validated

Additionally, I found the unit tests of the same method weren't cleaning the returned data according to that method's return structure so it was asserting incorrect types