Do not allow html or php as template extension

Otherwise that gets php libraries files processed through the layout templates.