authentication + bootsrap