Properly sanitise displayed userid