update bottle-auth get via pypi, no more via git