CS-4563: User editing in back-end allows for cross-site scripting

Cast user id parameter to int.
Cast language id parameter to int and fixes error on not found language.
Merge remote-tracking branch 'holman/fix-user-edit-injection' into v4.1