Security Fix: HTML Email Template Path