JSON data links now use auth headers