links api design and auth