Set HTMLPurifier to user application/cache for serializer path

Avoids adding another writable directory.
Fix double encoding in main reports block