fixed authorization; added bootstrap
cleanup