sql server search code in stored procedures