Added hardening against poisened cookies and look in .../web first for templates