fix potential User.search SQL injection
Merge pull request #212 from zendesk/sdavidovitz/search_sql_injection

fix potential User.search SQL injection