added different url for permissions tab, and implemented popstate support