Added 'prompt' to allowed URL parameters