name is [% r.param('name') | html %]
session var is [% session.param('var') | html %]