HTML escaping in comments
Admin auth form beautify