v4.1.12 Stable

Secured username field against XSS attacks, thanks for reporting to:
Michael Strametz of SySS Cyber Security GmbH (Austria).
UserDB: Allow NULL value for defaultfilter fields, updated to v13