Use htmlspecialchars in user delete & autocomplete, s#3