fixing auto boss permission
adding holder.js
image serving app