adjusted the loader and removed <$= and replaced with <%- to fix security threat