added permissions check closes #742
update to latest lantern-ui
handle new "url" interaction

closes #727
make runCommand work on windows
only allow /interaction/url for whitelisted domains