search: Escape non-word chars for search queries

Currently, searching for keywords like `jared@no-such-domain.com` would result in a MySQL query error