+ more than one </script> tag in username no longer breaks the page.
(aka. Javascript never ceases to surprise me)
Merge pull request #1060 from domenukk/fixxss

+ more than one </script> tag in username no longer breaks the page, part 2