login.php: Escape quotes in the referer field