change permission url and match url in manifest.json