Admin site: XSS protection for the login form.