only show link to API responses when proper permissions
fixed closing tag