Removed everything other than <script/> tags in html's
username and password are actually submitted and stored from the form