Escape username and password during u2f login

Untested partial fix for issue #36

sections/login/u2f.php

@@ -13,8 +13,8 @@ $U2FReq = json_encode($U2F->getAuthenticateData($U2FRegs));
 View::show_header('U2F Authentication'); ?>
 
 <form id="u2f_sign_form" action="login.php" method="post">
-  <input type="hidden" name="username" value="<?=$_POST['username']?>">
-  <input type="hidden" name="password" value="<?=$_POST['password']?>">
+  <input type="hidden" name="username" value="<?=htmlspecialchars($_POST['username'])?>">
+  <input type="hidden" name="password" value="<?=htmlspecialchars($_POST['password'])?>">
   <input type="hidden" name="u2f-request" value='<?=$U2FReq?>'>
   <input type="hidden" name="u2f-response">
 </form>