+ more than one </script> tag in username no longer breaks the page, part 2

(aka. Javascript never ceases to surprise me)