add cross origin permission for my chrome extension