fix XSS in users.helpers._user_link (bug 990078)
Merge pull request #28 from magopian/990078-xss-user-link

fix XSS in users.helpers._user_link (bug 990078)