Adds storage permission to manifest.

This doesn't actually eliminate the SecurityError on my Keon running 1.3, but I believe it is necessary.  Hopefully, you'll only need to tweak this slightly.

The change to webapp.js allows it to show a useful error messsage.