E-mail template.
PayPal IPN should be CSRF exempt.