fixes for manifest for forms that require authentication