playing with authenticated links