added auth headers to JSON links