Refactor #params_for_search method to better match existing practice.

- remove #search_as_hidden_fields (unused)
- extract #sanitize_search_params into a stand-alone method
- change signature of #params_for_search to allow:
     - zero-arg form that just sanitized parameters
     - one-arg form that merges the request params and the arg
     - two-arg form that merges the provided source params with
           the merge params