Fix XSS vulnerability in current user bootstrapping.