controllers: Pull the scoped_search concern out

This fixes the last complaint of codeclimate about those controllers.