more changes with authorization and fixed the window.bootstrappedUserObject bug