bug 859988 fix manifest to force https, r+a=gavin