prevent XSS in registration

Prevent XSS in registration, for now