+ </script> tag in username no longer breaks the page