adds script to bootstrap data
prevent unauthenticated access
properly locks down controllers
removes eligible contestant