escaping user input so searches with regex chars work