Removed nl2br on models - it doesn't belong there.
Sanitized user's name in email template
Sanitized and added nl2br for line breaks