now using html/template instead of text/template package for HTML output safety (not really neccessary in this case, but it is best practice for every web app)