Match whether %5B or \[ for `[` and %5D or \] for `]`

It seems that rails 3-0-stable doesn't escape such entities in the URL, all
other versions above do.

I don't think we want to fix rails 3-0 behaviour specifically for ransack.