Added link to article on persisted XSS via username