Feature/collection search filter

If this blows up (for example, because someone provided an invalid value for the sort field) we should return a 'bad request' error code, rather than 500 server error. I think there is a standard Jersey constant for this.