put version check/config check after sessions/rate limiter so it works correctly & only uses 1 db hit
switched that in all places used (class loads mostly) moved all includes at the beginning of index into bootstrap moves *_PATH defines from config to bootstrap config now uses defaults first, then user config
cleanup for PR