added passwords to middleware manifest