added HTML sanitizing when inserting username info to database