Fixes and futures

* Fix 3 vulnerable field for XSS
* Fix language issues in templates
+ Add user custom fields support to com.user