Bugfix: login default character not working correctly.
re-added HTML protection.