fix SSP patch, update boostrap URL