Fix XSS vulnerability in renderLivejournal_User()

If <code>$Livejournal_User_Remote_Images</code> is set to 1, one can append arbitrary attributes to the tags, e.g. <code><lj user='foo" onclick="evilxssscript()' /></code>