diff --git a/src/main/resources/templates/fragment/head.html b/src/main/resources/templates/fragment/head.html
index 6fb38f8..8a82a65 100644
--- a/src/main/resources/templates/fragment/head.html
+++ b/src/main/resources/templates/fragment/head.html
@@ -10,12 +10,16 @@
     <meta content="index, follow" name="robots"/>
     <meta http-equiv="content-type" content="text/html; charset=utf-8">
     <meta content="https://www.eactive.co.kr/" property="og:url"/>
+    <meta name="_csrf" th:content="${_csrf.token}"/>
     <title>API Simulator</title>
-    <link href="/css/font.css" rel="stylesheet" type="text/css"/>
-    <link rel="stylesheet" href="/css/fontawesome/css/all.min.css" type="text/css"/>
-    <link href="/css/bootstrap/bootstrap.min.css" rel="stylesheet" type="text/css"/>
-    <link href="/css/custom.css" rel="stylesheet" type="text/css"/>
-    <link rel="stylesheet" href="/css/dataTables/datatables.min.css" />
+    <link rel="stylesheet" th:href="@{/css/font.css}" type="text/css"/>
+    <link rel="stylesheet" th:href="@{/css/fontawesome/css/all.min.css}" type="text/css"/>
+    <link rel="stylesheet" th:href="@{/css/bootstrap/bootstrap.min.css}" type="text/css"/>
+    <link rel="stylesheet" th:href="@{/css/dataTables/datatables.min.css}" />
+    <link rel="stylesheet" th:href="@{/plugins/jquery-ui/jquery-ui.min.css}" type="text/css"/>
+    <link rel="stylesheet" th:href="@{/plugins/drawflow/drawflow.min.css}" type="text/css"/>
+    <link rel="stylesheet" th:href="@{/css/custom.css}" type="text/css"/>
+
 
     <!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->
     <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
@@ -24,21 +28,21 @@
     <script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script>
     <![endif]-->
 
-    <script src="/js/jquery/jquery.min.js"></script>
-    <script src="/js/bootstrap/bootstrap.bundle.min.js"></script>
-    <script src="/js/underscore/underscore-min.js"></script>
-    <script src="/js/lodash.js"></script>
-    <script src="/js/util.js"></script>
-    <script src="/js/jquery-serialize-object/jquery.serialize-object.js"></script>
-    <script src="/js/jquery-validation/jquery.validate.min.js"></script>
-    <script src="/js/jquery-validation/additional-methods.min.js"></script>
-    <script src="/js/jquery-validation/localization/messages_ko.min.js"></script>
-    <script src="/js/common.js"></script>
-    <script src="/js/dataTables/datatables.min.js"></script>
-    <script src="/plugins/vs/loader.js"></script>
+    <script th:src="@{/plugins/drawflow/drawflow.min.js}"></script>
+    <script th:src="@{/js/jquery/jquery.min.js}"></script>
+    <script th:src="@{/plugins/jquery-ui/jquery-ui.min.js}"></script>
+    <script th:src="@{/js/bootstrap/bootstrap.bundle.min.js}"></script>
+    <script th:src="@{/js/underscore/underscore-min.js}"></script>
+    <script th:src="@{/js/lodash.js}"></script>
+    <script th:src="@{/js/util.js}"></script>
+    <script th:src="@{/js/jquery-serialize-object/jquery.serialize-object.js}"></script>
+    <script th:src="@{/js/jquery-validation/jquery.validate.min.js}"></script>
+    <script th:src="@{/js/jquery-validation/additional-methods.min.js}"></script>
+    <script th:src="@{/js/jquery-validation/localization/messages_ko.min.js}"></script>
+    <script th:src="@{/js/common.js}"></script>
+    <script th:src="@{/js/dataTables/datatables.min.js}"></script>
+    <script th:src="@{/plugins/vs/loader.js}"></script>
 
-    <script type="text/javascript">
-    </script>
 </head>
 
 </html>