Move all the bootstrapping code to BootstrapService / Create interceptor to give access only to admin for user list