escape regex in user search