Improve regular expression for rendering users

Use word boundaries to the regular expression that identifies users.
This way a string will not match a user when it has word characters
before the "@" character.

A test case for not rendering users inside the text of html links is
also added.

Fixes #8178.