update displayed url if it changes while popup open; add `dismiss` method to allow clients to manuall dismiss popup