+ more than one </script> tag in username no longer breaks the page.
(aka. Javascript never ceases to surprise me)