* Fix username rendering bug * XSS integration test * Migration to unescape user full names
make test
check