Fixed XSS on login screen