bug #5297 :  XSS flaw with the error code in the login page

 The error code is now encoded for HTML before using it as a key of an error message
Don't forget to integrate it into 5.12.8-SNAPSHOT