Fix android manifest xsl injection

The keys are now properly pulled from the manifest.json addons.facebook
section.
Fix android login `scope` interface