bootloader selftprotection

reject any write behind the start address of the bootloader