API Require ADMIN for ?showtemplate=1 (2.4)

Doesn't expose sensitive data (to my knowledge), but still an information leak, so low-priority security issue.