Update user.php

CRLF Header Injection fixed.