fix content script permissions