Prevent XSS attacks in username field (settings)

Thanks, daksh @ HackerOne!