add OAuth to manifest