Fix #444 - Search was not scoped to repo. r=karlcow

This happened because params is a MultiDict, so update doesn't
do what I thought it would do. MultiDict is allowed to have multiple
keys that are the same.