authorize all requests in manifest.