disabled unsafe action. added toasts. added uses-permission.
added TODO