fixed XSS in usernames.
gti pushMerge branch 'master' of github.com:Dirbaio/ABXD