Prevent XSS attack in password hint after sign up