Bump app-validator

+ Add support for recognizing permission types
* Fix for URL normalization traceback