Fixed issue #07860: Reflected XSS in delete user functionality (thanks to aesteban)
Dev: flattenText for user, user_name and mail because it's flatenned at new user.