Update CONTRIBUTING.md

update bug reporting suggestions a bit
Fixes #4536 Get the remote_user from multiple sources in a preferred order
Use prepared stmt instead of manually quoting when reading