Fixed MS-reported XSS bug on sds login page