Sanitize error messages before writing to login page

[jsjoeio]

Issue identified by CodeQL in src/node/util.ts

See issue explanation and recommendation: https://github.com/cdr/code-server/security/code-scanning/44?query=ref%3Arefs%2Fheads%2Fmain