update template submodule to fix CAS login on IE8