Escape elasticsearch query string

Working around this:

https://github.com/elasticsearch/elasticsearch/issues/1387
Merge pull request #466 from MastodonC/feature/hardened-search

Escape elasticsearch query string