Add validation to avoid XSS in the login page