change detail.html for csrf