Fix User name and other parameters potentially containing HTLM characters

### Body The User name and other parameters should be validated to not contain characters that might contain HTML-invalid characters. Also when they do, they should be escaped when rendered on HTML pages. ### Committer - [X] I acknowledge that I am a maintainer/committer of the Apache Airflow project.