fix(core) bootstrap panic

panic occurred because I made a false assumption that the bootstrap list is greater than the boostrap threshold. This is not true for older clients (that have one bootstrap node) and clients that have manually modified the bootstrap config. Now, a `min` is taken to index safely.

@jbenet @mappum @whyrusleeping