Don't run user application in the bootloader unless a valid app is present (thanks to Alex Kazik).