Add file:// allowed origin to hybrid platform instructions

Closes #191.