Searches should be mutable.

There's quite a horrible hack embedded in this commit, which has to do
with an odd interaction between associations and transactions in Ember
Data.  I'm writing up a bug report.
Patch over an overly-broad security fix in Rails.

See monkeypatch comments for more information.