Backends should require ACCESS_COARSE_LOCATION permission

Added this to example, as well as various fixes