Removed the <all_urls> authorization
Updated README/manifest