Fixed wrong username or password html injection