set up correct permissions to access Chrome API::webRequest and Facebook.com/*