search works

still need to sanitize input