added security and implemented status update on detail page