cleaned up search_prefs and made it take a token instead of user/pass

Signed-off-by: William Rockwood <wrockwood@tadl.org>