added permissions and API key to manifest