Prevent reflective XSS vulnerabilities
[BF] If a user is disabled, ensure they cannot login
Merge branch 'bf-security'