extract only 'User app' and delete permission tag in config.xml