add unsafe eval to manifest

makes _.template() work in a chrome extension
render topics whitelist from a template with dummy data