bug #5297 :  XSS flaw with the error code in the login page

 The error code is now encoded for HTML before using it as a key of an error message