use handlebars for client-side templates, because it fails safely