People can change the username... unfortunately

Signed-off-by: emanuele <emanuele45@gmail.com>
Better escape text strings added as javascript variables

Signed-off-by: emanuele <emanuele45@gmail.com>