Use daemon/sipb-xen.mit.edu and don't give user fake auth token in an HTML comment.
drwxr-xr-x - templates
-rwxr-xr-x 1351 xen-ips