Persistent XSS vulnerability in basicAuthAccount form fix