Fixed reflected XSS

When registration has failed, the variables weren't properly escaped and they could lead to reflected XSS.