Added xss_clean checks to login