Give the gift of Drupal. All merchandise is 50% off through 2016.
The [node:author] token just outputs $node->name. Any time a user name is output the format_username() function should be used.
Good catch! Committed to 7.x and 8.x. Thanks.
Automatically closed -- issue fixed for 2 weeks with no activity.
Drupal is a registered trademark of Dries Buytaert.