Refactored manifest and added permissions

added needed permissions for webview. Damn, that thing is secure.