allow the "show reddit information" button to appear on https websites

This enables the background.js reddit information function to run on https
domains.  I updated the permissions in the manifest, and there is currently
a bug in webkit which requires the style-src 'unsafe-inline' directive.

See here: https://bugs.webkit.org/show_bug.cgi?id=112270