add: Bootswatch, lock media model, add auth and JWS