Use Velocity to generate email

If the `EmailService` is the one holding the sanitizer, I wonder if we also need to sanitize all those emails that don't go out via this service.