Fix for potential XSS in login form