Allow for use of '()' in json_list 'order'.

Use case:
Obtaining a random set of results e.g. http://mysite/articles/?order=RAND%28%29&limit=5

Risk:
Possible injection vector.

Possible other options:
Checking 'order' for RAND and RANDOM and inserting them in code.

Will update PR if better idea put forward