PWA manifest.json is being served as text/html due to security challenge

Due to how browsers handle cookies PWA manifests cannot work the traditional way. Please follow this guide: