added test for xss in user registration