Fix manifest to use web_accessible_resources for the OAuth callback URLs; use new OAuth libraries; other various cleanup