Using $extAuthSource['login_link'] in the api_not_allowed message see BT#7381