use auth parameter for bootstrap updates also