bolt auth package