Update doc/design/linc_permissions.md

Co-authored-by: Kabilar Gunalan <kabi@mit.edu>

doc/design/linc_permissions.md

@@ -41,7 +41,7 @@ Render with hosted Neuroglancer
 - Host Neuroglancer fork on S3 bucket with static site hosting enabled. Create an AWS CloudFront distribution to sit as a verified proxy with permission to access many S3 assets at once via presigned cookies.  Provide CNAME for CloudFront Distribution URL to `neuroglancer.lincbrain.org` so that cookies generated by LINC Archive (also living at a `*.lincbrain.org`) can be shared between the API and the Neuroglancer site.
 - Modify the Neuroglancer source code to handle a CloudFront asset path (i.e. `neuroglancer.lincbrain.org` since the domains of the presigned cookie are limited to `*.lincbrain.org` domains due to same-site requirements for cookies) that is similar to any S3 asset path (i.e. `s3://`).
 - Cookies would get passed in request to get asset
-- See the #diagram section for further details on the design.
+- See the [diagram](#diagram) section for further details on the design.
 
 #### AWS Cognito, npm AWS SDK package