fixed security issue, detail status display, imporved msg on api response