fixed manifest and password parameters