mongoid: escape regular expression in search

Otherwise someone could attack the application with regular expression denial of service