1.2 release

Updated permissions to only need access to XKCD domains and not
anything over http and https