add permissions to manifest
convert from chrome app to appengine