Users can sort auctions by name

https://trello.com/c/c1sAlUTC/35-as-a-user-i-can-sort-auctions-by-name

![image](https://cloud.githubusercontent.com/assets/8681076/5014407/799b83e0-6a63-11e4-881a-2d3e7f9ebf43.png)

![image](https://cloud.githubusercontent.com/assets/8681076/5014411/7f35e516-6a63-11e4-80e3-1f948795352e.png)


Can you use `?` like you would in `where("name = ?"` to avoid getting hacked?