added webrequest to permissions