generate a random manifest URL in fake API
fix app installation