Blacklist certain chars from search queries (*,")

These characters may come from subsonic clients, as subsonic allows
lucene queries on its search.