Fix XSS in user signup

Hi, I'm a new Facebook employee in Bootcamp. I saw this bug and I'm submitting a pull request for a fix. I'll also respond on the task internally. Tested with XSS-inducing input and verified response from server is properly escaped now during signup failure. Looked for potential XSS vectors and found none.