visiting the user options page with crafted post data or query fragments can produce "we hit a bug"

[Mark Sapiro]

If one visits the user options page with a hand crafted query fragment or post data containing for example

language=en&email=&email=test&password=&login-remind=Remind

the fact that the options CGI sees 'email' as a list rather than a string throws an exception in Utils.websafe().

We will defend against this by testing in Utils.websafe() for a sequence argument and if so, returning only websafe of the first element.