Update instructions about app/storage permissions

777 is overkill, giving write access is enough.