You don't need power of attorney to act on someone's behalf with their explicit permission and instruction. It may be against TreasuryDirect's terms of service (I have no idea, I haven't read them), but there's nothing specifically illegal about this.