XWIKI-21203: Members panel doesn't properly escape the user's name

* Use $xwiki.getUserName($user) to render the link directly
* Use clean=false to avoid HTML cleaning
* Add a page test