Add remote URL permissions to manifest