Fixed manifest again

Made it match all urls correctly and added permission request from the
user.
Later will implement popup.html