add "power" to optional_permissions and remove unnessesary permission URL (thanks François Beaufort)